Wholly.to
Log in

Legal

Privacy Policy

Last updated: July 2026

This policy explains what personal information Wholly holds and why. It is written to meet our obligations under South Africa's POPIA and the EU/UK GDPR. We never move or hold your money, but we do store some personal data, and we take that seriously.

1. Who we are

Wholly is operated by 8by3. For any privacy request, contact privacy@8by3.net.

2. What we collect

  • Account data — your name and email, via 8by3 single sign-on.
  • Creator receive details — bank name, branch code, and the account identifiers you publish (IBAN, account number, PayShap proxy) or a Wise link.
  • Support records — if you choose to record support you've set up (creator, cadence, an amount you type in). We store what you tell us; we do not verify it against any bank.

We do not collect card numbers, bank credentials, or payment-provider tokens, and we never see the payments themselves.

3. How your data is protected

Raw account identifiers (IBAN, account number, PayShap proxy) are encrypted at rest. Receive details are only shown in the support flow for that creator, never in bulk. Access is limited to what the service needs to run.

4. Why we use it (lawful basis)

To provide the service you asked for (routing supporters to creators) and to send you reminders you opt into. That is performance of our agreement with you and, for optional reminders, your consent — which you can withdraw at any time.

5. Sharing

We do not sell your data. A creator's published receive details are, by design, shown to supporters they route. Sign-in and any email we send are handled by other 8by3 services acting on our behalf. We do not add third-party trackers.

6. Retention

We keep your data while your account is active. You can delete your page and receive methods at any time, and request deletion of your account.

7. Your rights

You may access, correct, export, or delete your personal information, object to processing, and withdraw consent. Email privacy@8by3.net and we will respond within the timeframes POPIA/GDPR require.

8. Changes

We may update this policy; the "last updated" date above will change. See also our Terms of Use.